Privacy Policy

Stream Hatchet Website Privacy Policy

Who is the data controller?

The controller of your personal data is STREAM HATCHET, S.L.U. (hereinafter, “Stream Hatchet”, “we”, “us” or the “Controller”), with registered office at Avenida Diagonal 420, Barcelona, Spain, Spanish tax identification number (NIF) B98820913. You can contact us at contact@streamhatchet.com. 

Stream Hatchet is part of a group of companies whose parent company is GameSquare Holdings, Inc., located at 1008, 150 York Street, Toronto, ON M5H 3S5, Canada.

Data Protection Officer (DPO)

If you have any questions about this Privacy Policy or the processing of your personal data, you can contact our Data Protection Officer:

What personal data do we process?

As a general rule, we do not request special categories of personal data through our website. Please do not provide us with this type of information unless it is strictly necessary.

The personal data that we may process will depend on the relationship you have with us, the channel used and the specific purpose of the processing. 

2.1. Data we collect from you when you engage with us

When you interact with us, we may process personal identification and contact data, such as your first and last name, your company and job title or role, your email address and your telephone number. In some cases, we may also process your country, city or business address, as well as any other contact information you voluntarily provide to us.

If you also interact with us professionally, we may also process data related to your business or professional activity, such as the company or organisation to which you belong, your position, department or functional area, as well as your sector or professional interests. We may also process publicly available professional information (e.g., your LinkedIn profile or other professional sources), where it is relevant to the business or professional relationship.

In addition, we will process the personal data you provide to us through contact forms or subscription to our newsletters, demo requests, commercial information or quotes, emails, chats or communications that you send us and surveys, feedback forms or participation in events.

2.2. Data we collect from you when you browse our website

When you browse our website, we may process certain technical and usage data, such as your IP address, online identifiers, the type of device, operating system and browser you use, as well as your regional settings and time zone.

We may also collect information about your browsing, such as the pages you visit, the time spent or how you interact with content, forms or communications. We also process certain technical data (logs) necessary to ensure the security, maintenance and proper functioning of the site.

Some of this information may be collected using cookies or similar technologies. For more information, you can consult our Cookie Policy. (ADD LINK)

2.3. Data about your marketing and communications preferences

We may process information related to your preferences regarding marketing communications, such as your active subscriptions, the consents you have granted or withdrawn and your interaction with our campaigns, newsletters or promotional content.

2.4. Data we process in recruitment processes

If you send us your CV through the website, we may process the information you include in your CV, as well as the contact details you use to submit it.

If you also participate in a recruitment process, we may process the data contained in the cover letter or application forms as well as, where applicable, the notes derived from the recruitment process, interviews or evaluations relating to you.

2.5. Economic and administrative data

Where a contractual relationship exists with us, it is necessary to process certain personal data related to the administrative, financial, and contractual management of that relationship, such as billing data, payment details, or any other information necessary for this purpose. 

2.6. Data we obtain from external and/or public sources

We may supplement the information provided directly by you with data from external sources where necessary, for example:

• publicly accessible sources;
•  professional and commercial registers, directories and databases;
• third parties with whom there is a legitimate professional or commercial relationship;
• group companies;
• providers or platforms acting on our behalf or on a valid legal basis;
• third parties in respect of whom you have consented to the disclosure of data.

2.7. Data of minors

Our services are not directed to minors. In general, we do not knowingly collect personal data from minors through the corporate website. If you believe that a child has provided us with personal data without proper authorization, you can contact us so that we can take appropriate action.

How do we collect your data?

The personal data we process may come from the following sources:

3.1. Data provided directly by you

Most of the personal data processed by Stream Hatchet comes directly from the data subject when interacting with the website, filling in the forms available on the website or contacting us in relation to applications or commercial enquiries.

3.2. Data obtained automatically during browsing

Some of the information is collected automatically when you interact with the website, for example, through server logs, cookies or other similar technologies, always in accordance with the applicable regulations and with the configuration you choose in our banner or cookie panel.

3.3. Data from third parties or public sources

In certain cases, we may obtain personal data from publicly accessible sources, as well as from group companies, partners or professional networks, directories and databases.

For what purposes do we process your data and on what legal basis?

We process your personal data only if there is a valid legal basis for doing so and to the extent that the processing is adequate, relevant and limited to what is necessary for the respective purpose. Below, we describe the main purposes for which we may process your data:

4.1. To manage contact, information, demo or quote requests

We process your data to respond to your queries, requests for information, requests for demos, proposals, quotes or any other communication you send us.

Legal basis:

• application of pre-contractual measures at the request of the data subject;
• performance of the contract, where applicable;
• Stream Hatchet’s legitimate interest in properly addressing the professional and business enquiries received.

4.2. To manage the commercial, contractual or professional relationship

We process your data to manage the relationship with customers, suppliers, partners, collaborators and their respective representatives or professional contacts, including registrations, validations, follow-up of opportunities, negotiation, contractual formalisation, administrative management and associated support.

Legal basis:

• performance of the contract;
• pre-contractual measures;
• compliance with legal obligations;
• our legitimate interests in managing our business relationships.

4.3. To manage subscriptions to newsletters, content and informative communications

If you subscribe to our newsletters or request to receive informational content, we will use your data to send you the corresponding communications and manage your preferences.

Legal basis:

• consent of the data subject, where the subscription is based on an express request;
• legitimate interest, when the regulations allow the sending of communications related to similar products or services in the context of a previous relationship and always with the possibility of opting-out.

4.4. To send commercial and promotional communications

We may process your data to send you communications about our services, solutions, events, content, news, promotions or initiatives related to Stream Hatchet’s activity.

Legal basis:

• consent, where legally required;
• legitimate interest in the framework of B2B relationships or previous customers, under the terms permitted by the applicable law and always providing a simple and free opt-out mechanism.

4.5. To improve the website, analyze its use and optimize our services

We process technical, browsing and usage data to understand how users interact with our website, improve the browsing experience, measure the performance of the site, detect incidents and optimise content, functionalities or relationship strategies with our users and customers.

Legal basis:

• consent, where the processing depends on the use of cookies or similar technologies that are not necessary;
• legitimate interest for strictly necessary internal analytics, operational improvement and service security, when it is in accordance with applicable law.

4.6. To manage and secure the website and our systems

We process personal data to ensure the security, integrity and availability of the website and information systems, including fraud prevention, security incident management, technical traceability, support, maintenance and business continuity.

Legal basis:

• legitimate interest in ensuring information security, business continuity, and preventing misuse of our systems;
• compliance with legal obligations, where applicable.

4.7. To manage surveys, events, webinars, or similar initiatives

If you participate in a survey, event or webinar promoted by Stream Hatchet, we may process your data to manage your registration, participation, associated communications, event monitoring and subsequent evaluation.

Legal basis:

• performance of the contract or pre-contractual measures;
• consent, if applicable;
• legitimate interest in organising and improving our communication and professional relationship initiatives.

4.8. To update and maintain the quality of our records

We may process your data to keep our database updated, correct incidents, unify duplicate records, verify professional contact details or maintain the traceability of the commercial or institutional relationship.

Legal basis:

• performance of the contract or pre-contractual measures;
• compliance with legal obligations;
• legitimate interest in maintaining accurate and up-to-date records.

4.9. To manage applications and selection processes

If you send us your CV or participate in a selection process, we will process your data to assess your application, to manage current or future selection processes, contact you and, where appropriate, process your incorporation.

Legal basis:

• application of pre-contractual measures at the request of the data subject;
• consent where applicable;
• legitimate interest in organizing and developing selection processes.

4.10. To comply with legal obligations and requirements from authorities

We may process and, where appropriate, communicate personal data to comply with legal, accounting, tax, commercial, regulatory obligations or collaboration with authorities, courts and tribunals.

Legal basis:

• compliance with legal obligation.

Do we make automated decisions or build user profiles?

We use certain analytical, segmentation or personalisation tools for communications that allow us to classify interactions or preferences in a limited way in order to improve the relevance of the content sent and measure the impact of our communication or marketing actions.

In any case, this type of processing will be carried out within the limits permitted by the applicable law and without adopting automated decisions that produce legal effects or significantly affect the data subject in a similar way through the mere browsing of this website.

Who do we share your data with? Where is your data hosted? Do we carry out international data transfers?

Your personal data may be communicated to companies in the GameSquare Holdings Inc. group when we are entitled to do so, and to and to service providers where necessary to provide our services. 

We will also share your personal data with authorities where required to do so by law. 

In general, the information processed through our systems may be hosted on technological infrastructures and cloud services used by Stream Hatchet or by suppliers acting on our behalf. This infrastructure includes Amazon Web Services (AWS) and SingleStore services, among other providers that are necessary at any time for the provision of services and the management of the business.

For certain operations or services, some of our suppliers, group companies or partners may be located outside the European Economic Area (EEA) or allow remote access from third countries.

Where this occurs, Stream Hatchet will adopt the appropriate safeguards required by data protection regulations to legitimise the international transfer.

How long do we keep your data?

We will retain your personal data only for as long as necessary to fulfil the purpose for which it was collected and thereafter for the legally applicable retention and limitation periods. To this end, we comply with the security and blocking standards required by the applicable law.

What are your rights?

You can exercise your rights under data protection regulations at any time, under the terms and to the extent provided for by law. In particular, you may exercise the following rights:

• Access: to know what data we process about you and to obtain certain information about this processing.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure: request the deletion of your data where lawfully required.
• Object: object to certain processing, especially those carried out for direct marketing purposes or based on legitimate interest, when there are reasons related to your particular situation.
• Restriction of processing: request that we temporarily suspend certain processing in cases provided for by law.
• Portability: to receive your data in structured, commonly used and machine-readable format, or requesting its transmission to another controller when appropriate.
• Withdrawal of consent: where the processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of the prior processing.
• Not to be subject to decisions based solely on automated processing, including profiling, when they produce legal effects or similarly significantly affect you, under the legally applicable terms.

How can you exercise your rights?

You can exercise your rights at:

• Email: privacy@streamhatchet.com
• Postal address: the address indicated in the heading of this Policy.

In order to properly process your request, we may ask you for reasonable additional information to verify your identity, especially where this is necessary to prevent unauthorised access to your data. If you consider that the processing of your personal data violates the applicable law, you can file a complaint with the Spanish Data Protection Agency (AEPD) in www.aepd.es.

Changes to this Privacy Policy

Stream Hatchet may update this Privacy Policy at any time to adapt it to regulatory, interpretive, technical, organizational or functional changes.

Where changes are material, we will communicate this by reasonable means, for example by means of notice on the website or, where appropriate, through direct communications.

Last updated: April 202